1625 matches found
PT-2014-8461 · Sap · Sap Netweaver As Abap
Name of the Vulnerable Software and Affected Versions: SAP Netweaver AS ABAP version 7.31 Description: The issue allows remote authenticated users to obtain sensitive information by making a request to the RSDU CCMS GET PROFILE PARAM RFC function. Recommendations: For SAP Netweaver AS ABAP versio...
CVE-2014-4007
The SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...
Hardcoded credentials
The SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...
CVE-2014-4007
The CVE-2014-4007 entry concerns SAP Upgrade tools for ABAP that contain hardcoded credentials. This root cause enables remote attackers to gain access via unspecified vectors, as described in the NVD entry. The vulnerability is assessed with a Medium base severity (CVSSv2: AV:N/AC:L/Au:N/C:P/I:N...
CVE-2014-4007
The SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...
CVE-2014-4007: Undefined Security Weakness
The SAP Upgrade tools for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...
SAP NetWeaver - Hardcoded Credentials
Application: SAP NetWeaver Vendor URL: http://www.sap.com Bugs: Hardcoded credentials Reported: 06.03.2014 Vendor response: 07.03.2014 Date of Public Advisory: 15.06.2015 Reference: SAP Security Note 2057982 Authors: Rustem Gazizov, Diana Grigorieva ERPScan VULNERABILITY INFORMATION Class:...
CVE-2014-3130
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
Design/Logic Flaw
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
CVE-2014-3130
Technical details (affected product/version, root cause, exploit information) are not provided in the supplied documents for CVE-2014-3130; monitor for updates.
CVE-2014-3130
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
CVE-2014-3130: Undefined Security Weakness
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
CVE-2014-2752
SAP Business Object Processing Framework BOPF for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...
Hardcoded credentials
SAP Business Object Processing Framework BOPF for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...
CVE-2014-2752
The CVE-2014-2752 entry concerns SAP Business Object Processing Framework (BOPF) for ABAP with hardcoded credentials in its deployment. The concrete detail provided across sources identifies the affected component as BOPF for ABAP and the root cause as hardcoded credentials, enabling remote acces...
CVE-2013-6815
The SHSTIUPLOADXML function in the Application Server for ABAP AS ABAP in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity XXE issue...
Xxe
The SHSTIUPLOADXML function in the Application Server for ABAP AS ABAP in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity XXE issue...
CVE-2013-6815
The SHSTIUPLOADXML function in the Application Server for ABAP AS ABAP in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity XXE issue...
CVE-2013-6815: Improper Input Validation
The SHSTIUPLOADXML function in the Application Server for ABAP AS ABAP in SAP NetWeaver 7.31 and earlier allows remote attackers to cause a denial of service via unspecified vectors, related to an XML External Entity XXE issue...